Lucene search
Veracode Vulnerability DatabaseVERACODE:6180HistoryApr 24, 2018 - 7:22 a.m.
Denial Of Service (DoS) Through Null Pointer Dereference
2018-04-2407:22:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
47.0%
libcairo.so is vulnerable to denial of service (DoS) attacks. A malicious user can pass a font file to the application to cause a null pointer dereference that can crash the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libcairo.so | le | 2.11704.0 | |
| libcairo.so | le | 2.11704.0 |
References
seclists.org/oss-sec/2017/q2/151
bugs.freedesktop.org/attachment.cgi?id=131213&action=edit
bugs.freedesktop.org/show_bug.cgi?id=100763
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
Related
mageia
mageia
Updated cairo packages fix security vulnerability
2020-09-03 00:48:09
cvelist
cvelist
CVE-2017-7475
2017-05-19 20:00:00
ubuntucve
ubuntucve
CVE-2017-7475
2017-05-19 00:00:00
nessus
nessus
EulerOS 2.0 SP5 : cairo (EulerOS-SA-2021-1181)
2021-02-04 00:00:00
EulerOS Virtualization 3.0.2.6 : cairo (EulerOS-SA-2021-1428)
2021-03-10 00:00:00
EulerOS 2.0 SP3 : cairo (EulerOS-SA-2019-2561)
2019-12-19 00:00:00
osv
osv
cairo is vulnerable to denial of service due to a null pointer dereference
2017-11-15 20:41:14
prion
prion
Null pointer dereference
2017-05-19 20:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1181)
2021-02-05 00:00:00
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2019-2561)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1428)
2021-03-05 00:00:00
cve
cve
CVE-2017-7475
2017-05-19 20:29:00
redhatcve
redhatcve
CVE-2017-7475
2017-05-04 10:23:58
debiancve
debiancve
CVE-2017-7475
2017-05-19 20:29:00
github
github
cairo is vulnerable to denial of service due to a null pointer dereference
2017-11-15 20:41:14
nvd
nvd
CVE-2017-7475
2017-05-19 20:29:00